CVE-2026-59545
Received Received - Intake

Unauthenticated Broken Authentication in miniOrange Discord Integration

Publication date: 2026-07-23

Last updated on: 2026-07-23

Assigner: Patchstack

Description
Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-23
Last Modified
2026-07-23
Generated
2026-07-23
AI Q&A
2026-07-23
EPSS Evaluated
N/A
NVD
CVE-2026-59545
EUVD
EUVD-2026-48198

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
miniorange miniorange_discord_integration to 2.2.4 (inc)
miniorange discord_integration to 2.2.4 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-288 The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-59545 is an unauthenticated broken authentication vulnerability in the miniOrange Discord Integration WordPress plugin versions 2.2.4 and below. It allows attackers to bypass authentication and perform actions that require higher privileges, such as gaining admin access to websites.

Detection Guidance

Check if the miniOrange Discord Integration plugin version 2.2.4 or below is installed on your WordPress site. Look for unauthorized admin access or suspicious activities in logs.

Impact Analysis

This vulnerability can allow attackers to take control of your WordPress site without needing credentials. They could modify site content, steal data, install malicious plugins, or use your site for further attacks. The high CVSS score of 8.1 indicates a significant risk of exploitation.

Mitigation Strategies

Update the plugin to version 2.2.5 or later immediately. Apply Patchstack's mitigation rule to block attacks until the update is complete.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59545. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart